CVE-2025-61962

In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context.

Scoring

Severity

MEDIUM

CVSS base score

5.9

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS probability

0.41%

CWE

CWE-142

Published

2025-10-04

Last modified

2026-03-12

Affected products

• fetchmail fetchmail

Weakness type

• CWE-142

Related vulnerabilities

• CVE-2026-13379 — The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to...
• CVE-2025-1774 — Logs manipulation in BotSense

Markdown version · Browse all CVEs